Page 1 of 1

RESOLVED: SSL Certificate Windows CA Issue

Posted: Fri Jan 03, 2025 11:03 am
by KWGagel
I backed up our production NagiosXI and restored it to our test environment which wiped out the installed certificate of the test environment. In replacing it I've followed these two KB articles.
https://support.nagios.com/kb/article/n ... s-595.html
https://support.nagios.com/kb/article.php?id=597
Unfortunately, the test environment still shows it is "Not secure".
I noticed in the details of the cert that there is no hierarchy displayed that shows the internal (Windows) CA. Whereas in the production environment the cert there shows the hierarchy to the internal CA.

Is there a different Windows CA KB article to follow that provides different steps?

Re: SSL Certificate Windows CA Issue

Posted: Fri Jan 03, 2025 12:46 pm
by KWGagel
It appears that the KB's available for SSL on Windows CA are out of date. We were able to resolve the issue by adding the server name and FQDN to the 'Additional attributes' part of the request.
ie: SAN:DNS=servername&DNS=servername.domain.ca

Re: SSL Certificate Windows CA Issue

Posted: Fri Jan 03, 2025 1:48 pm
by DoubleDoubleA
Hi @KWGagel,

Thank you for the report and your solution! I've raised this with the doc update team.

Aaron